448cfd1b41e28c4a1cd3de05896134ea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

448cfd1b41e28c4a1cd3de05896134ea_JaffaCakes118
Size

5KB
MD5

448cfd1b41e28c4a1cd3de05896134ea
SHA1

4fd6b7d1d39c3cc9ee6fbfb605899f8c7a872e93
SHA256

24d9b554ab3061de0233736cc01fbd5598ebe727aa859a1ce336cc2d5ca2a67f
SHA512

b60034e52115092cf7f63722addf5d389dbdb956689144fafd373793e5cc503ba34f91e84a21135a684a5a17f8f0565d46a712c24e9874e0b32f030e11a9be32
SSDEEP

48:iAW57X7P8vS7m0CyDiwQEXxv5B0EFCSQK+6g4qT9+KM:87Pw0bU4xhZC7tCE+K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
448cfd1b41e28c4a1cd3de05896134ea_JaffaCakes118

Files

448cfd1b41e28c4a1cd3de05896134ea_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b3c6d1c6e05fff6fc4382824c0369a57

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
ExitProcess
GetCommandLineA
GetProcAddress

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 238B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ